Security

The read-only default, the action gate, and the trust model.